Hello,
I am sorry, bu I need help.
I can connect with my PC (win8) or smartphone but I can't use it to browse the server lan, internet from the server with client.
The machine is an intel I5 with Debian stable
The server as a static address of 192.168.1.106
There is no DNS
Here is my config:
dev tun
proto udp
port 1194
ca /etc/openvpn/easy-rsa/keys/ca.crt
cert /etc/openvpn/easy-rsa/keys/server.crt
key /etc/openvpn/easy-rsa/keys/server.key
dh /etc/openvpn/easy-rsa/keys/dh1024.pem
ifconfig-pool-persist ipp.txt
client-to-client
client-config-dir ddd
keepalive 10 120
user nobody
group nogroup
push "redirect-gateway def1 bypass-dhcp"
server 10.8.0.0 255.255.255.0
persist-key
persist-tun
status /var/log/openvpn-status.log
verb 3
#set the dns servers
push "dhcp-option DNS 8.8.8.8"
push "dhcp-option DNS 8.8.4.4"
# WINS is provided by the NAS
push "dhcp-option WINS 192.168.1.191"
log-append /var/log/openvpn
comp-lzo
Client conf
dev tun
client
proto udp
remote 81.28.206.197 1194
resolv-retry infinite
nobind
persist-key
persist-tun
ca ca.crt
cert portable_Thierry.crt
key portable_Thierry.key
comp-lzo
verb 3
/etc/network/interfaces
# The loopback network interface
auto lo
iface lo inet loopback
auto eth0
allow-hotplug eth0.10
auto eth0.10
iface eth0.10 inet static
address 192.168.1.106
netmask 255.255.255.0
gateway 192.168.1.1
vlan-raw-device eth0
#iptv
auto eth0.20
iface eth0.20 inet dhcp
vlan-raw-device eth0
rc.local
#!/bin/sh -e
#
# rc.local
#
# This script is executed at the end of each multiuser runlevel.
# Make sure that the script will "exit 0" on success or any other
# value on error.
#
# In order to enable or disable this script just change the execution
# bits.
#
# By default this script does nothing.
# Print the IP address
_IP=$(hostname -I) || true
if [ "$_IP" ]; then
printf "My IP address is %s\n" "$_IP"
fi
iptables-restore < /etc/iptables.conf
exit 0
iptables.conf
# Generated by iptables-save v1.4.14 on Tue Jan 6 22:45:11 2015
*filter
:INPUT ACCEPT [109041:145874157]
:FORWARD ACCEPT [0:0]
:OUTPUT ACCEPT [671:51732]
COMMIT
# Completed on Tue Jan 6 22:45:11 2015
# Generated by iptables-save v1.4.14 on Tue Jan 6 22:45:11 2015
*nat
đŸ˜›REROUTING ACCEPT [55:6517]
:INPUT ACCEPT [9:1152]
:OUTPUT ACCEPT [7:418]
đŸ˜›OSTROUTING ACCEPT [7:418]
-A INPUT -i eth0.10 -p udp -m udp --dport 1194 -j ACCEPT
-A POSTROUTING -s 10.8.0.0/24 -o eth0.10 -j SNAT --to-source 81.28.206.197
COMMIT
# Completed on Tue Jan 6 22:45:11 2015
server log:
Fri Jan 9 12:26:15 2015 portable_thierry/93.20.236.134:63871 [portable_thierry] Inactivity timeout (--ping-restart), restarting
Fri Jan 9 12:26:15 2015 portable_thierry/93.20.236.134:63871 SIGUSR1[soft,ping- restart] received, client-instance restarting
Fri Jan 9 12:37:10 2015 MULTI: multi_create_instance called
Fri Jan 9 12:37:10 2015 93.20.236.134:57609 Re-using SSL/TLS context
Fri Jan 9 12:37:10 2015 93.20.236.134:57609 LZO compression initialized
Fri Jan 9 12:37:10 2015 93.20.236.134:57609 Control Channel MTU parms [ L:1542 D:138 EF:38 EB:0 ET:0 EL:0 ]
Fri Jan 9 12:37:10 2015 93.20.236.134:57609 Data Channel MTU parms [ L:1542 D:1 450 EF:42 EB:135 ET:0 EL:0 AF:3/1 ]
Fri Jan 9 12:37:10 2015 93.20.236.134:57609 Local Options hash (VER=V4): '530fd ded'
Fri Jan 9 12:37:10 2015 93.20.236.134:57609 Expected Remote Options hash (VER=V 4): '41690919'
Fri Jan 9 12:37:10 2015 93.20.236.134:57609 TLS: Initial packet from [AF_INET]9 3.20.236.134:57609, sid=9c42756c 0eefc053
Fri Jan 9 12:37:11 2015 93.20.236.134:57609 VERIFY OK: depth=1, /C=FR/ST=AIN/L= prevessin_Moens/O=Vorms/CN=Vorms_CA/name=Vorms/emailAddress=
vormsty@gmail.com
Fri Jan 9 12:37:11 2015 93.20.236.134:57609 VERIFY OK: depth=0, /C=FR/ST=AIN/L= prevessin_Moens/O=Vorms/CN=portable_thierry/name=Vorms/emailAddress=vormsty@gmai l.com
Fri Jan 9 12:37:11 2015 93.20.236.134:57609 Data Channel Encrypt: Cipher 'BF-CB C' initialized with 128 bit key
Fri Jan 9 12:37:11 2015 93.20.236.134:57609 Data Channel Encrypt: Using 160 bit message hash 'SHA1' for HMAC authentication
Fri Jan 9 12:37:11 2015 93.20.236.134:57609 Data Channel Decrypt: Cipher 'BF-CB C' initialized with 128 bit key
Fri Jan 9 12:37:11 2015 93.20.236.134:57609 Data Channel Decrypt: Using 160 bit message hash 'SHA1' for HMAC authentication
Fri Jan 9 12:37:11 2015 93.20.236.134:57609 Control Channel: TLSv1, cipher TLSv 1/SSLv3 DHE-RSA-AES256-SHA, 1024 bit RSA
Fri Jan 9 12:37:11 2015 93.20.236.134:57609 [portable_thierry] Peer Connection Initiated with [AF_INET]93.20.236.134:57609
Fri Jan 9 12:37:11 2015 portable_thierry/93.20.236.134:57609 MULTI_sva: pool re turned IPv4=10.8.0.6, IPv6=1a00::4891:fe56:4b7f:0
Fri Jan 9 12:37:11 2015 portable_thierry/93.20.236.134:57609 MULTI: Learn: 10.8 .0.6 -> portable_thierry/93.20.236.134:57609
Fri Jan 9 12:37:11 2015 portable_thierry/93.20.236.134:57609 MULTI: primary vir tual IP for portable_thierry/93.20.236.134:57609: 10.8.0.6
Fri Jan 9 12:37:14 2015 portable_thierry/93.20.236.134:57609 PUSH: Received con trol message: 'PUSH_REQUEST'
Fri Jan 9 12:37:14 2015 portable_thierry/93.20.236.134:57609 send_push_reply(): safe_cap=960
Fri Jan 9 12:37:14 2015 portable_thierry/93.20.236.134:57609 SENT CONTROL [port able_thierry]: 'PUSH_REPLY,redirect-gateway def1 bypass-dhcp,dhcp-option DNS 8.8 .8.8,dhcp-option DNS 8.8.4.4,dhcp-option WINS 192.168.1.191,route 10.8.0.0 255.2 55.255.0,topology net30,ping 10,ping-restart 120,ifconfig 10.8.0.6 10.8.0.5' (st atus=1)
Fri Jan 9 12:46:11 2015 read UDPv4 [EHOSTUNREACH]: No route to host (code=113)
Fri Jan 9 12:46:19 2015 read UDPv4 [EHOSTUNREACH]: No route to host (code=113)
Fri Jan 9 12:46:31 2015 read UDPv4 [EHOSTUNREACH]: No route to host (code=113)
Fri Jan 9 12:46:42 2015 read UDPv4 [EHOSTUNREACH]: No route to host (code=113)
Fri Jan 9 12:46:51 2015 read UDPv4 [EHOSTUNREACH]: No route to host (code=113)
Fri Jan 9 12:47:01 2015 read UDPv4 [EHOSTUNREACH]: No route to host (code=113)
Fri Jan 9 12:47:10 2015 read UDPv4 [EHOSTUNREACH]: No route to host (code=113)
Fri Jan 9 12:47:22 2015 read UDPv4 [EHOSTUNREACH]: No route to host (code=113)
Fri Jan 9 12:47:29 2015 read UDPv4 [EHOSTUNREACH]: No route to host (code=113)
Fri Jan 9 12:47:41 2015 read UDPv4 [EHOSTUNREACH]: No route to host (code=113)
Fri Jan 9 12:47:49 2015 read UDPv4 [EHOSTUNREACH]: No route to host (code=113)
Fri Jan 9 12:48:01 2015 read UDPv4 [EHOSTUNREACH]: No route to host (code=113)
Fri Jan 9 12:48:09 2015 read UDPv4 [EHOSTUNREACH]: No route to host (code=113)
Fri Jan 9 12:48:21 2015 read UDPv4 [EHOSTUNREACH]: No route to host (code=113)
Fri Jan 9 12:48:22 2015 portable_thierry/93.20.236.134:57609 [portable_thierry] Inactivity timeout (--ping-restart), restarting
Fri Jan 9 12:48:22 2015 portable_thierry/93.20.236.134:57609 SIGUSR1[soft,ping- restart] received, client-instance restarting
client log
